Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5bd93f6c-9c20-4393-a8f8-1424eaa1dcbe.roa
File: 5bd93f6c-9c20-4393-a8f8-1424eaa1dcbe.roa (raw, json)
Hash identifier: 6/mQj358L9N/CaJ9ogyE3QlLOLwtGluuflqoKGkFrkM=
Subject key identifier: 23:8B:DA:E1:A9:91:95:D4:2D:45:6C:FA:85:8F:26:75:1A:AC:B5:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6A1BCABEDC61C5473461B7842D7832429EA224AA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5bd93f6c-9c20-4393-a8f8-1424eaa1dcbe.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1b:ca:be:dc:61:c5:47:34:61:b7:84:2d:78:32:42:9e:a2:24:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=1f49b29878975493461f9e49ec32fd1d70491c24ebcf99fef4957a684cbdcc3f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:03:e2:d8:5d:b3:ba:00:d5:13:16:63:82:
b5:b2:7c:23:aa:fa:a4:92:c6:f7:3b:cc:1d:64:d4:
e5:b3:b5:15:c9:2d:c5:46:a7:96:cc:a9:ac:22:c5:
dd:21:d1:44:8f:b7:f6:28:a1:0e:6a:cb:8c:86:53:
ea:b3:74:6a:bc:8c:59:56:4e:1a:70:ab:ef:aa:8b:
02:90:79:22:62:db:8f:85:c8:41:e2:84:69:39:22:
bf:41:c1:1a:e0:ad:10:aa:a7:42:a1:65:14:f5:89:
5e:d1:83:03:91:47:a3:64:ef:1d:00:dc:60:fc:fe:
2e:eb:55:66:24:2f:1c:d2:be:6a:af:c0:30:77:c7:
a7:22:93:00:bb:6b:ea:26:ec:db:4a:06:1a:a2:4d:
11:db:ab:c4:b6:22:e7:36:24:ca:ca:09:56:0a:0c:
d1:c9:22:74:d9:e5:4c:0d:20:c4:29:56:75:6b:5c:
5c:51:cd:e2:3a:5b:9b:59:94:f3:87:d7:7f:5c:b2:
56:e8:8b:c3:8d:bc:14:59:68:49:27:f5:c0:02:61:
18:64:db:24:36:b4:84:94:21:ae:c5:4c:1b:77:71:
89:06:97:28:ab:5d:52:6b:f2:9f:41:69:e9:fd:d5:
1d:fa:55:73:d8:f9:7b:12:ea:76:6f:1f:82:62:90:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:DA:E1:A9:91:95:D4:2D:45:6C:FA:85:8F:26:75:1A:AC:B5:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5bd93f6c-9c20-4393-a8f8-1424eaa1dcbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:9e:cc:37:61:b6:51:a5:2a:b0:9b:f5:71:56:2e:8f:d5:f4:
e2:12:42:36:97:50:28:84:8c:68:e7:99:f6:5e:99:23:43:85:
4b:64:c9:c0:c5:5b:01:c9:1c:d2:21:d7:af:12:33:c4:a3:17:
58:57:a0:e6:3d:79:33:39:8d:bd:9a:66:51:e6:9b:82:29:3c:
58:a9:87:e9:22:89:93:2e:92:9b:d4:4d:49:de:59:29:8f:4f:
81:71:54:87:cf:53:ea:08:28:26:d1:e2:b3:dc:59:5d:93:54:
a8:59:8c:cf:17:25:a7:24:1e:87:16:90:30:31:ef:c6:79:1c:
9e:e6:0e:d2:f0:9e:ce:a4:74:74:46:ca:63:04:71:0b:e7:26:
e3:e7:a3:a4:ce:dd:66:d5:10:22:5a:e3:d1:ca:9a:a1:d5:dc:
b4:81:39:a6:23:65:13:56:3e:ad:09:a0:d4:1e:07:97:fe:39:
d2:89:aa:c4:f5:82:cc:56:97:1f:bf:95:ea:2f:09:ab:7c:19:
ce:41:70:ea:07:fe:f3:33:f2:c7:f9:15:66:cc:84:f0:54:50:
4c:8c:2a:ad:e4:64:0e:5f:35:64:31:d6:d6:42:a0:4a:be:d4:
65:8c:66:19:c6:22:11:45:15:2e:1c:17:2e:b9:5e:eb:21:b9:
6c:43:a8:c2
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUahvKvtxhxUc0YbeELXgyQp6iJKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTkwMDAwMDBaFw0yNDEyMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDFmNDliMjk4Nzg5NzU0OTM0NjFmOWU0OWVjMzJmZDFkNzA0OTFjMjRlYmNm
OTlmZWY0OTU3YTY4NGNiZGNjM2YxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN80A+LYXbO6ANUTFmOCtbJ8I6r6pJLG9zvMHWTU5bO1FcktxUanlsyprCLF
3SHRRI+39iihDmrLjIZT6rN0aryMWVZOGnCr76qLApB5ImLbj4XIQeKEaTkiv0HB
GuCtEKqnQqFlFPWJXtGDA5FHo2TvHQDcYPz+LutVZiQvHNK+aq/AMHfHpyKTALtr
6ibs20oGGqJNEdurxLYi5zYkysoJVgoM0ckidNnlTA0gxClWdWtcXFHN4jpbm1mU
84fXf1yyVuiLw428FFloSSf1wAJhGGTbJDa0hJQhrsVMG3dxiQaXKKtdUmvyn0Fp
6f3VHfpVc9j5exLqdm8fgmKQ9UECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQji9rh
qZGV1C1FbPqFjyZ1Gqy11jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NWJkOTNmNmMtOWMyMC00MzkzLWE4ZjgtMTQyNGVhYTFkY2JlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADMUMA0G
CSqGSIb3DQEBCwUAA4IBAQA/nsw3YbZRpSqwm/VxVi6P1fTiEkI2l1AohIxo55n2
XpkjQ4VLZMnAxVsByRzSIdevEjPEoxdYV6DmPXkzOY29mmZR5puCKTxYqYfpIomT
LpKb1E1J3lkpj0+BcVSHz1PqCCgm0eKz3Fldk1SoWYzPFyWnJB6HFpAwMe/GeRye
5g7S8J7OpHR0RspjBHEL5ybj56Okzt1m1RAiWuPRypqh1dy0gTmmI2UTVj6tCaDU
HgeX/jnSiarE9YLMVpcfv5XqLwmrfBnOQXDqB/7zM/LH+RVmzITwVFBMjCqt5GQO
XzVkMdbWQqBKvtRljGYZxiIRRRUuHBcuuV7rIblsQ6jC
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:38 2024 by rpki-client on console.sobornost.net